Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U5Aza3WToeAxPofIXDcDGAQQaNU.roa
File: U5Aza3WToeAxPofIXDcDGAQQaNU.roa (raw, json)
Hash identifier: dedrSs6VGB4ST/q8GRffdI7iqGV5y5iuoDN5ME5Rll0=
Subject key identifier: 53:90:33:6B:75:93:A1:E0:31:3E:87:C8:5C:37:03:18:04:10:68:D5
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0182DA06698AC6C921FDC985C328336DBEB4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U5Aza3WToeAxPofIXDcDGAQQaNU.roa
Signing time: Fri 26 Aug 2022 12:00:29 +0000
ROA not before: Fri 26 Aug 2022 12:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 141.11.74.0/23 maxlen: 24
141.11.1.0/24 maxlen: 24
141.11.4.0/24 maxlen: 24
141.11.234.0/23 maxlen: 24
141.11.144.0/21 maxlen: 24
141.11.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:06:69:8a:c6:c9:21:fd:c9:85:c3:28:33:6d:be:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Aug 26 12:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5390336b7593a1e0313e87c85c370318041068d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:c8:61:98:49:f0:b4:59:8f:7f:63:e3:20:
d3:48:e4:5a:2d:16:bb:04:3c:9d:de:1e:1d:44:74:
e5:e4:b7:13:d3:b2:28:be:31:f4:6b:f5:98:e9:63:
25:6d:53:e3:7b:30:ec:ec:68:73:5b:2f:a3:6c:cf:
f3:3b:f4:03:64:1a:10:fc:93:25:9f:93:d0:ab:72:
4f:89:4b:63:c8:a7:b4:0a:a1:36:a8:45:39:9a:d0:
43:7d:35:df:c1:9c:62:c7:13:e6:7b:d7:90:6b:28:
c1:55:dc:b8:4e:ad:2b:6e:1f:55:f3:42:57:23:6d:
e8:71:23:63:12:a8:71:e4:4a:7b:2a:ab:21:fd:b4:
0c:03:43:e2:ba:b8:35:3f:ae:23:30:7a:fe:7e:e4:
49:30:c5:dd:e7:42:2b:97:6d:4b:20:b4:48:86:cc:
2e:77:c8:48:7f:3d:5b:ef:87:b7:f3:8b:d9:5f:6f:
87:66:47:a2:3a:18:6a:29:33:3f:25:cb:7d:ab:15:
67:03:a9:2e:ad:22:8d:c3:d3:e7:35:8e:a1:4e:41:
26:5a:36:ab:a7:ae:a1:0f:5c:e5:92:f7:7a:9d:26:
f8:a0:c0:5d:3e:1e:c6:5d:de:5c:7f:44:41:5b:8a:
db:38:09:fa:ae:14:69:9c:da:eb:77:58:20:6d:21:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:90:33:6B:75:93:A1:E0:31:3E:87:C8:5C:37:03:18:04:10:68:D5
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/U5Aza3WToeAxPofIXDcDGAQQaNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.1.0/24
141.11.4.0/24
141.11.34.0/24
141.11.74.0/23
141.11.144.0/21
141.11.234.0/23
Signature Algorithm: sha256WithRSAEncryption
65:09:0b:56:ee:29:c8:95:81:47:d4:d8:62:74:3c:02:d1:bf:
70:a7:7b:01:d1:5a:37:ca:36:ec:45:ff:73:ef:47:08:5e:d8:
80:b4:3f:04:1c:23:d6:a2:38:70:76:c3:7f:88:b4:82:6f:25:
fc:52:c3:ed:2f:ac:81:f5:83:ad:88:0c:d7:6b:61:28:38:ff:
c9:f1:37:99:61:0b:2e:0f:7f:22:6f:a8:b3:72:cb:0a:69:3c:
40:2f:86:5e:68:a5:a7:fa:c3:87:c7:03:1d:ef:cb:ed:31:aa:
0c:01:21:88:0e:1d:1c:59:f5:ab:8b:32:48:dd:13:04:82:23:
83:93:07:ea:cd:dd:6f:bd:ef:c2:11:02:ae:a6:d2:4b:6b:a9:
2b:3a:4a:56:79:e4:02:fc:d8:ca:0d:5f:33:3f:cf:28:e3:08:
8d:d0:c9:67:46:47:9c:71:60:a7:c0:97:28:19:a1:c8:6e:c1:
18:2a:d1:39:c9:6b:d4:67:99:a3:3a:bd:f2:74:89:76:17:7a:
1e:ca:2b:72:11:b6:05:f6:1a:1e:d8:12:a0:4e:9e:95:62:31:
61:03:36:45:79:3c:09:e9:80:07:c1:e2:c8:ae:93:56:1b:4d:
cc:4a:6d:c1:40:d0:be:48:57:42:53:b7:d4:f3:f2:49:7d:83:
9d:8a:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org